go-msrpc

README

MS-RPC IDL Parser/Codegen for Go

The IDL parser for the Microsoft Extension of the C706: DCE/RPC 1.1.

Usage

See examples and dcerpc package documentation.

Examples rely on following environment variables:

Name	Description	Example
USERNAME	The Domain\Username	"MSAD2.COM\User"
PASSWORD	The password	"password"
PASSWORD_MD4	The password hash (use go run examples/helpers/nt_hash.go -d $PASSWORD to generate the hash)	"f077ca4b7d73486a45e75dcdd74cd5bd"
WORKSTATION	The workstation name	"Ubuntu"
SERVER	The server FQDN or IP	"192.168.0.22"
SERVER_NAME	The server NetBIOS name	"WIN2019"
SERVER_HOST	The server FQDN	"my-server.win2019.com"
SAM_USERNAME	The machine account name (see examples/netlogon_sec_channel.go)	"COMPUTER$"
SAM_PASSWORD	The machine account password (see examples/netlogon_sec_channel.go)	"password"
SAM_WORKSTATION	The machine account workstation name	"COMPUTER"
TARGET	The target name (SPN) for kerberos.	"host/my-server.win2019.com"
KRB5_CONFIG	The kerberos config path.	"/path/to/krb5.conf"

For codegeneration, run make all to regenerate all sources, or make nrpc.go.

Features

Connection-oriented DCE/RPC v5 client implementation

The library implements the CO RPC v5 (dcerpc package) with following features:

• Connection Multiplexing: multiple clients over single connection

• Multiple Connection per Association Group: ability to use context handles from one connection on another, flexibility in arranging the clients-per-connection-per-association

• Verification Trailer: ability to add verification trailer to the request payload

• Kerberos, Netlogon, NTLM, SPNEGO Authentication

• Endpoint mapper / string binding support

• DCOM basic support

• Eventlog BinXML parser

• WMIO object unmarshaler / marshaler.

MS-RPCE Extensions

The library implements some of the extensions defined in MS-RPCE document:

• Security Context Multiplexing: ability to create multiple security contexts over the same logical connection.

• Bind-time Feature Negotiation: (actually not a feature).

• Header Signing: (legacy thing,

GSS-API / SSP Client Side

The library contains the GSS-API interface definitions. (ssp/gssapi)

The library contains the ssp package which has an implementation for the various security service providers, like Kerberos, NTLM, Netlogon (Secure Channel), SPNEGO.

• GSSAPI interface implementation including Ex-methods defined in Microsoft documentation

• Kerberos:

  • Supported Enc Types: RC4-HMAC, AES128-CTS-HMAC-SHA1, AES256-CTS-HMAC-SHA1

  • DCE and non-DCE APReq/APRep style

• NTLM

  • Supported Versions: NTLMv1, NTLMv2

• Netlogon:

  • Supported Encryption Types: RC4-HMAC, AES-SHA2

• SPNEGO:

  • Supported Mech List MIC

  • Supported NegTokenInit2

Generated Stubs

Code	Description	Package
MS-ADTS	Active Directory Technical Specification: Claims	github.com/oiweiwei/go-msrpc/msrpc/adts
MS-EVEN6-BINXML	BinXml encodes an XML document so that the original XML text can be correctly reproduced from the encoding.	github.com/oiweiwei/msrpc/binxml
MS-BKRP	BackupKey Remote Protocol	github.com/oiweiwei/msrpc/bkrp
MS-BPAU	Background Intelligent Transfer Service (BITS) Peer-Caching: Peer Authentication Protocol	github.com/oiweiwei/msrpc/bpau
MS-BRWSA	Common Internet File System (CIFS) Browser Auxiliary Protocol	github.com/oiweiwei/msrpc/brwsa
MS-CAPR	Central Access Policy Identifier (ID) Retrieval Protocol	github.com/oiweiwei/msrpc/capr
MS-CMPO	MSDTC Connection Manager: OleTx Transports Protocol	github.com/oiweiwei/msrpc/cmpo
MS-CMRP	Failover Cluster: Management API (ClusAPI) Protocol	github.com/oiweiwei/msrpc/cmrp
MS-DFSNM	Distributed File System (DFS): Namespace Management Protocol	github.com/oiweiwei/msrpc/dfsnm
MS-DHCPM	Microsoft Dynamic Host Configuration Protocol (DHCP) Server Management Protocol	github.com/oiweiwei/msrpc/dhcpm
MS-DLTM	Distributed Link Tracking: Central Manager Protocol	github.com/oiweiwei/msrpc/dltm
MS-DLTW	Distributed Link Tracking: Workstation Protocol	github.com/oiweiwei/msrpc/dltw
MS-DNSP	Domain Name Service (DNS) Server Management ProtocolDomain Name Service (DNS) Server Management Protocol	github.com/oiweiwei/msrpc/dnsp
MS-DRSR	Directory Replication Service (DRS) Remote Protocol	github.com/oiweiwei/msrpc/drsr
MS-DSSP	Directory Services Setup Remote Protocol	github.com/oiweiwei/msrpc/dssp
MS-DTYP	Windows Data Types	github.com/oiweiwei/msrpc/dtyp
MS-EERR	ExtendedError Remote Data Structure	github.com/oiweiwei/msrpc/eerr
MS-RPCE-EPM C706-EPM	Endpoint Mapper	github.com/oiweiwei/msrpc/epm
MS-ERREF	Windows Error Codes	github.com/oiweiwei/msrpc/erref
MS-EVEN	EventLog Remoting Protocol	github.com/oiweiwei/msrpc/even
MS-EVEN6	EventLog Remoting Protocol Version 6.0	github.com/oiweiwei/msrpc/even6
MS-FASP	Firewall and Advanced Security Protocol	github.com/oiweiwei/msrpc/fasp
MS-FAX	Fax Server and Client Remote Protocol	github.com/oiweiwei/msrpc/fax
MS-ICPR	ICertPassage Remote Protocol	github.com/oiweiwei/msrpc/icpr
MS-IRP	Internet Information Services (IIS) Inetinfo Remote Protocol	github.com/oiweiwei/msrpc/irp
MS-LREC	Live Remote Event Capture (LREC) Protocol	github.com/oiweiwei/msrpc/lrec
MS-LSAD	Local Security Authority (Domain Policy) Remote Protocol	github.com/oiweiwei/msrpc/lsad
MS-LSAT	Local Security Authority (Translation Methods) Remote Protocol	github.com/oiweiwei/msrpc/lsat
MS-MQDS	Message Queuing (MSMQ): Directory Service Protocol	github.com/oiweiwei/msrpc/mqds
MS-MQMP	Message Queuing (MSMQ): Queue Manager Client Protocol	github.com/oiweiwei/msrpc/mqmp
MS-MQMQ	Message Queuing (MSMQ): Data Structures	github.com/oiweiwei/msrpc/mqmq
MS-MQMR	Message Queuing (MSMQ): Queue Manager Management Protocol	github.com/oiweiwei/msrpc/mqmr
MS-MQQP	Message Queuing (MSMQ): Queue Manager to Queue Manager Protocol	github.com/oiweiwei/msrpc/mqqp
MS-MQRR	Message Queuing (MSMQ): Queue Manager Remote Read Protocol	github.com/oiweiwei/msrpc/mqrr
MS-MSRP	Messenger Service Remote Protocol	github.com/oiweiwei/msrpc/msrp
MS-NEGOEX	SPNEGO Extended Negotiation (NEGOEX) Security Mechanism	github.com/oiweiwei/msrpc/negoex
MS-NRPC	Netlogon Remote Protocol	github.com/oiweiwei/msrpc/nrpc
MS-NRPC-SECCHANNEL	Secure Channel Establishment and Maintenance	github.com/oiweiwei/msrpc/nrpc
MS-NSPI	Name Service Provider Interface (NSPI) Protocol	github.com/oiweiwei/msrpc/nspi
MS-OXABREF	Address Book Name Service Provider Interface (NSPI) Referral Protocol
MS-OXCRPC	Wire Format Protocol	github.com/oiweiwei/msrpc/oxcrpc
MS-PAC	Privilege Attribute Certificate Data Structure	github.com/oiweiwei/msrpc/pac
MS-PAN	Print System Asynchronous Notification Protocol	github.com/oiweiwei/msrpc/pan
MS-PAR	Print System Asynchronous Remote Protocol	github.com/oiweiwei/msrpc/par
MS-PCQ	Performance Counter Query Protocol	github.com/oiweiwei/msrpc/pcq
MS-RAA	Remote Authorization API Protocol	github.com/oiweiwei/msrpc/raa
MS-RAIW	Remote Administrative Interface: WINS	github.com/oiweiwei/msrpc/raiw
MS-RPCL	Remote Procedure Call Location Services Extensions	github.com/oiweiwei/msrpc/rpcl
MS-RPRN	Print System Remote Protocol	github.com/oiweiwei/msrpc/rprn
MS-RRP	Windows Remote Registry Protocol	github.com/oiweiwei/msrpc/rrp
MS-RSP	Remote Shutdown Protocol	github.com/oiweiwei/msrpc/rsp
MS-SAMR	Security Account Manager (SAM) Remote Protocol (Client-to-Server)	github.com/oiweiwei/msrpc/samr
MS-SCH	Task Scheduler Service Remoting Protocol	github.com/oiweiwei/msrpc/sch
MS-SCMR	Service Control Manager Remote Protocol	github.com/oiweiwei/msrpc/scmr
MS-SRVS	Server Service Remote Protocol	github.com/oiweiwei/msrpc/srvs
MS-SSP	Single Sign-On Protocol	github.com/oiweiwei/msrpc/ssp
MS-SWN	Service Witness Protocol	github.com/oiweiwei/msrpc/swn
MS-TRP	Telephony Remote Protocol	github.com/oiweiwei/msrpc/trp
MS-TSCH	Task Scheduler Service Remoting Protocol	github.com/oiweiwei/msrpc/tsch
MS-TSGU	Terminal Services Gateway Server Protocol	github.com/oiweiwei/msrpc/tsgu
MS-W32T	W32Time Remote Protocol	github.com/oiweiwei/msrpc/w32t
MS-WDSC	Windows Deployment Services Control Protocol	github.com/oiweiwei/msrpc/wdsc
MS-WKST	Workstation Service Remote Protocol	github.com/oiweiwei/msrpc/wkst

Generated DCOM Stubs

Code	Description	Package
MS-DCOM	Distributed Component Object Model (DCOM) Remote Protocol	github.com/oiweiwei/msrpc/dcom
MS-ADTG	Remote Data Services (RDS) Transport Protocol	github.com/oiweiwei/msrpc/adtg
MC-CCFG	Server Cluster: Configuration (ClusCfg) Protocol	github.com/oiweiwei/msrpc/ccfg
MS-COM	Component Object Model Plus (COM+) Protocol	github.com/oiweiwei/msrpc/com
MS-COMA	Component Object Model Plus (COM+) Remote Administration Protocol	github.com/oiweiwei/msrpc/coma
MS-COMEV	Component Object Model Plus (COM+) Event System Protocol	github.com/oiweiwei/msrpc/comev
MS-COMT	Component Object Model Plus (COM+) Tracker Service Protocol	github.com/oiweiwei/msrpc/comt
MS-CSRA	Certificate Services Remote Administration Protocol	github.com/oiweiwei/msrpc/csra
MS-CSVP	Failover Cluster: Setup and Validation Protocol (ClusPrep)	github.com/oiweiwei/msrpc/csvp
MS-DFSRH	DFS Replication Helper Protocol	github.com/oiweiwei/msrpc/dfsrh
MS-DMRP	Disk Management Remote Protocol	github.com/oiweiwei/msrpc/dmrp
MS-FSRM	File Server Resource Manager Protocol	github.com/oiweiwei/msrpc/fsrm
MC-IISA	Internet Information Services (IIS) Application Host COM Protocol	github.com/oiweiwei/msrpc/iisa
MS-IISS	Internet Information Services (IIS) ServiceControl Protocol	github.com/oiweiwei/msrpc/iiss
MS-IMSA	Internet Information Services (IIS) IMSAdminBaseW Remote Protocol	github.com/oiweiwei/msrpc/imsa
MS-IOI	IManagedObject Interface Protocol	github.com/oiweiwei/msrpc/ioi
MS-OAUT	OLE Automation Protocol	github.com/oiweiwei/msrpc/oaut
MS-OCSPA	Microsoft OCSP Administration Protocol	github.com/oiweiwei/msrpc/ocspa
MS-PLA	Performance Logs and Alerts Protocol	github.com/oiweiwei/msrpc/pla
MS-RAI	Remote Assistance Initiation Protocol	github.com/oiweiwei/msrpc/rai
MS-RDPESC	Remote Desktop Protocol: Smart Card Virtual Channel Extension	github.com/oiweiwei/msrpc/rdpesc
MS-VDS	Virtual Disk Service (VDS) Protocol	github.com/oiweiwei/msrpc/vds
MS-WCCE	Windows Client Certificate Enrollment Protocol	github.com/oiweiwei/msrpc/wcce
MS-WMI	Windows Management Instrumentation Remote Protocol	github.com/oiweiwei/msrpc/wmi
MS-WMIO	Windows Management Instrumentation Encoding Version 1.0 Protocol	github.com/oiweiwei/msrpc/wmio

Documentation

The codegen package also generates the documentation for the generated code pulled from the MSDN portal. (it can be quite inaccurate with determining general comment boundaries vs actual field descriptions, so inaccurate can be an HTML on MSDN side).

Naming

The codegen/go_names contains the ad-hoc naming engine, which sometimes quite sucks (so does the overall naming convention in IDL documents, seriously, how much time the average microsoft developer saves by writing para instead of param), but for most of the situations, provide a way to generate the names that comply with golang naming convention and give more intuition behind this or that field.

Generated Stubs

MIDL Implementation Limitations

• L.0001: #define statements are applicable only for constant declaration;

• L.0002: cpp_quote contents are limited only for constant declaration;

• L.0005: int const declaration is not supported.

• L.0006: wchar_t, status_error_t are predefined.

TODO

• Testing (I don't have much time)

• Handle reserved arguments/structure fields used for switch_is and size_is statements.

• Derive the type from field name, like ^f[A-Z] -> boolean.

• Pipes support

• Callbacks Support / Server-Side Support

• Static strings

• Handle anonymous structures inside union arms

• Kerberos HMAC-RC4 NT Hash support via Keytab.

References

Without these projects, it would be absolutely impossible to implement go-msrpc.

• Samba

• Impacket

• go-smb2

• go-krb5

Collaboration

Don't hesitate to raise an issues (and only then raise a PR), the project is quite raw, and I don't have much time, so, a lot of errors and issues are yet to discover.